Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-12401

During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.0%
CVSS Severity
CVSS v3 Score 4.7
CVSS v2 Score 1.9
Products affected by CVE-2020-12401


Contact Us

Shodan ® - All rights reserved